Digital Forensics Manager

As a Digital Forensic Manager within our Cyber Defence Centre, you will:

• Identify the importance of data and information.
• Determine which data should be recovered, backed up and preserved.
• Determine the frequency and retention of backups to provide adequate protection for compliance with audit and legislative requirements.
• Isolating and seizing as evidence in the form of computers, laptops and mobile devices that are believed to have been used in relation to internal disciplinary or criminal activities.
• Acquiring data from devices in a forensically sound manner, ensuring that any evidence obtained is legally admissible.
• Identify and resolve issues concerning any risks (investigative and legal).
• Determine and set the required tasks; allocate those tasks and monitor and report upon the results, implications and potential investigative leads to the investigation team.
• Technical reports will need to be written along with associated evidence and declarations that may be useful in court.
• Deliver and assist other professional in understanding the implications of their findings regarding the collected evidence.
• Provide support to the wider team as part of the Digital Forensics Group (DFG) and Cyber Defence Centre (CDC).
• Liaise with existing staff or associates, including an organisations specialist IT security professional, together with software and hardware vendors and any others supplying computer security related services.
• Expert testimony as an expert witness may be required to be provided in a court of law.
• Provide daily summary reports of activity relevant to Digital Forensic practices.
  
  Joining us as a Digital Forensic Manager, the minimum criteria you'll need is a 2.1 Degree in a Computer Science topic and investigative experience in a corporate security environment, Law Enforcement, or other relevant setting
. A passion for cyber security with any relevant IT / Security qualifications. It would be great if you had some of the following skills, but don't worry if you don't tick every box, we'll help you develop along the way.
• Good working knowledge of applicable laws including the Computer Misuse Act 1990 (as amended), Police and Criminal Evidence Act, Criminal Procedure and Investigations Act, General Data Protection Regulations, and the Investigatory Powers Act 2016
• IT literate across common operating systems (Windows, Linux, Mac OSX) coupled with strong data analysis skills
• Experience in working with industry standard tools e.g. FTK, X-Ways, Volatility, etc
• Knowledge of the eDiscovery Reference Model (EDRM) and how it is applied in a legal setting
• Good understanding of the modern threat landscape
• Good understanding or experience of cryptocurrency investigations
• Knowledge around using Open-Source Intelligence (OSINT) to support investigations
• Knowledge of cyber security standards such as ISO27001, NIST, CIS Top 20
• Accredited in digital forensic software
• Financial application or financial institution expertise
  
  Grant Thornton UK LLP is part of a global network of independent audit, tax and advisory firms, made up of some 73,000 people in over 150 countries. We're a team of independent thinkers who put quality, inclusion and integrity first. All around the world we bring a different experience to our clients. A better experience. One that delivers the expertise they need in a way that goes beyond. Personal, proactive, and agile. That's Grant Thornton., Every day our teams help people in businesses and communities to do what is right and achieve their goals.
The Grant Thornton Cyber Defence Centre are an established MSSP at the forefront of Cyber solutions, working with industry leading technologies. We offer a path for progression and invest in our workforce. Initiative is encouraged and support is always available across the team and wider group. We work collaboratively and cross functionally, boasting a healthy ethos whereby we aim to promote the best version of ourselves and you. In this role you will work with fully fledged Digital Forensic teams across a traditional working week. There will be instances (in the event of a breach) where it's all hands-on deck and overtime is expected, which may include deployment during weekends. Given the nature of this role, this should come as no surprise. Most importantly, expect to work on some of most intriguing and relevant jobs within this sector., Embracing uniqueness, the culture at Grant Thornton thrives on the contributions of all our people, we never settle for what is easy, we look beyond to deliver the right thing, for everyone. Building an inclusive culture, where we value difference and respect our colleagues helps our people to perform at the best of their ability and realise their potential. Our open and accessible culture means you'll interact with leaders who are interested in you and everything you bring to our firm. The things that set you apart, we value them. That's why we give you the freedom to bring your whole self to work and pursue your passions inside and outside of work. Beyond the job Life is more than work. The things you do, and the people you're with outside of work matter, that's why we're happy to look at flexible working options for all our roles, and we'll always do our best to keep your work and life in balance. The impact you can make here will go far beyond your day job. From secondments, to fundraising for local charities, or investing in entrepreneurs in the developing world, you'll be giving back to society. It's that drive to do the right thing that runs through our every move, grounded in our firm's values - purposefully driven, actively curious and candid but kind. We're looking for people who want to contribute, spark fresh ideas and go beyond expectations. People who want to be able to proudly do what's right, for the firm, our clients, our people and themselves. It's how it should be.

The things you do, and the people you're with outside of work matter, that's why we're happy to look at flexible working options for all our roles, and we'll always do our best to keep your work and life in balance. Whether that's working reduced contracted hours, working your hours over a shorter period or utilising our 'how we work' framework. Everyone has an immediate right to request a flexible arrangement through our flexible working policy.